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Abstract 



A token 12 creates utilization history information and sends the information to an information processing 
unit 1 1 and simultaneously creates an verification value and stores the value in a utilization-value holding 
unit 21 . The information processing unit 1 1 records the utilization history information in a history holding 
unit 16. On receiving a verification-value output request from the information processing unit 1 1 , the token 
12 provides the verification value with a signature and outputs the combination of the verification value and 
the signature. The information processing unit sends to a recovery unit 13 the verification value with the 
signature as well as the utilization history information. The recove ry un i t 1 3 v erifies the signature and also 



the utilization history on the basis of the verification value further. 
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[0 0 7 6] *^»6»2 4tt*«h-^y*JB«>IB» 

im»izt#*itivi>Q* mwtsffix'h&nxzz 

ximM%mwirmi-&. 

[0077] mtmjm2 oim^m 1 9*>w 

$2 1 fc«*3ftT^6afflW*M3JR9» fflJBIKKi: 
[0078] 

[gCl] H=Hash (Usage +H old) 
££T, HtefrU^iM, Ho 1 dfcHi&attlEtt* 

u s a g emmmm. Hasho tt-*rtittw»t 

JWfcU HRKIiMD 5^S HA(SecureHas 
h A 1 go r i thm) %t'tfm^btl&. -TOfgg 
fcjsft*" +" kv^aa»U«llfc:«aii:UTJ£L« 

tMEflfimff21(cl8lfrf« 

ffi£±##-fS) . 

[0 0 7 9] «aEffias^S2 2tifflfHKSSEl 1^4> 

*>ajaB**»t. *^e^-c«OEitfi»s»2ik:ffl* 

[0 080] mz -try *-*>HMJaBBl 3to^TiKB 
QMKKSl 3«flW*H5lc5t1-. H5fc*i^ 



T. E|lD3giE13tt. ESSmgP25. ffiSffi^S?2 
6.JSS8H$27. h-^y&BMMM$S2 8. S« 
«K»29**tfl/0*S. 0JRggl3*±i— !f<0lf 
$g$DJIgS 1 1 *6£6*i*£K&BB£<I32 5\zX 
■oTSffiU *«>rtS*JIffi8ftgJ2 6fct6lfrrs. IS 

miv£mMmimmm&2 nz£->xm*w> 

[0081] -^WtJi-fey^-li^:^. 
[00823 QMXBK 1 3 *MHtlMIHCOV vcR 

its. 

[0083]JUEMtf2 5liflm»l8iIl lfrfciS 

i mmssmn (02) fci§i«fctrAi:^iii 

OflMRWJiaraftSSfL*. JWBWi»2 5fcJ:->T 
JifcflJ8KffiiJKKtt98 2 6 (cffitt3*i£ . 

[0084 3 Sfefc, fPSJ^ai lfrfeSSMiTS 

fc. h-^yABMMW»2 8i:»S«aE»2 9t«-l, 

[00853 ffimmms. 1 1 *&wBd$gfi3*i* 

fc, MSSfia52 5*«g»tSXI.. g^K-o^SSJiEE 
«»»2*fc««S<t*i:*(c, gettES*2 9(caKc 
»*«»2 9tth-^>4MMIIWMiS2 8tclt 

*wm&mmm&&U2 6tztmztix 

»lB&bbi>MmZtLl. l>l.m&?i%tJ < ®X'b 
ft 1 v * o 8^fflfc«6<cii*attlHKtiUra ft v 

[00863 •&36W8ftfc^iOT«)JS«* , «tt 

[ o o 8 7 3 Mmmtt 2 6 (iffi^gftai 2 5 

c 0 0 8 8 3 wmamm 2 1 \mwsffi& 2 e izmzz 

< 1 ) SiffiSiifcJMKtfRHfc, ud,, udj, u 
d 3 . . . ud n k't&. 

(2) mmnmktzmtztix^&mMt:. huat 
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# h u d k& L < =5:4 fri: 3 j&^P^-S . 
[00893 

[®2] hud' =Hash (ud. + Hash (ud 
„_!+. . . Hash (udj+Hash (ud, + ih 
ud) ) . . . ) ) 
hud=?hud" 

(4) feUPUtittf. SK3*vOv3rkv #L<*ft 
g#£il*trt4. 

c o o 9 o 3 mz&®?9mistihfm<?>m;fc^x 
mtti. 

i o o 9 1 ] E6 th-^y 1 2m¥-o*rafc&&Bt 

^ft$iXfcti880Jg5S£jjH\ (a) liffiBS-?-?)*,*)*: 
i-ifOlf^-CHf^fcL-CV^^-CftS. (b) 

c?>mteh-?yi 2X'it%<, fmmim&mx"ft~> 

W3£T'£>=5:V\ 

[00923 £:r. tifffiiWfctf. ^st-tpm 
i^fcZitxfamz&miztts-zti&mmznm 
m-?h&. mam- a* y*-fc <k o-c^i^ii 

[ o o 9 3 j 07 MSfflmmmm&iTFt. < a ) a 

flHKIPF 0#fT* 4 . ( b ) lifif$8S!UIgS 1 1 *» -b 
f 9- (caSftS*l** (BBS?* "3 . ( a ) 0#f£fc h 
-?y**&ft-f4&SEffi. tJilffllWKdWih-^ 

[ 0 0 9 4 ] ffl* ^JlBKiH^gftft-CUttffi Lfctff 

[0 0 9 5] atflBBSSeKl lfeilfh-^^l 2 
Kfclt4*!yi£08rt>*>01 2fc#HLTBWH-*. II 
8 J±ffi«a^g 1 1 OfBMil 1 4£i?V v t, *fl JB#0» 
fcfllttOfflflaSfcWo fc^^JJSl^atffCft 4 . 0 9 
Jill t < 1 4 tcfcv ^TiMffl^^fUSKEQiR^ 



-9£$£%Itll^fcBtoWl-ttt*. 01 llih-^V 

ffi±£flf2 04)Xyi-C , fc&. 01 2«h-:?>'12<D& 
tMaM 2 2 jPHNB&S&B 1 1 ^mtmizjjw* 

[0096] 08£jjrr X 3 fc. flffl#4»6flWBWffl«> 

h**** o «: t £ (zuffwomt 1 1 1 4 £ 

mtetix^&frt' oiptwni <s 1 1 ) . Bt^fk^ 
<tTwar»tfiarflH8**o**»W6 (sis).i 

SrffjLT, H*flBRfcflMW-<S12) . iOk§, 

if — kV^3x7-^-/-fe-vS:aiLT5aaS:^ 
7"T4 ( S 1 3 . S 1 6 ) . Ji7—tP&ZtlWiixJlf. 

«S»dEMW* < S 1 4 ) . * LT*t#fif$8£«UI1- 
4 (SI 5) . 

[0097] 09 (3jr*-J: 3 (C. Hffl$*6ffJ8JIBl3 

ma^tfh^tz t * eutiHRttMi 1 1 <oMfflis& 1 4 

Btffts^Tv^ira^flwiu (S2 1 ) , m^-fk 
SitTvv^fthjfllffllt-f-oiijiBll-* (S24) . 
Bf^^ixTv^k^Wih-^yi 2JcWtT«-f« 
miULX. ttmm*?]*®? (S22) . -5-LT h 
-^^1 2*»<5>3gS*ut«JBJHK^r -f ^^tpOEIHg 

«ce»t4 ( s 2 3 ) . cio^^^^pg^Ma-rs 

(S24) . 

[0098] 01 0tr^rtJ:3fc. h-?yi2^)Sf 

m 9#mmmgiw.i i*^Bf-^t$^fff8om-^ 

IftZtiZ (S 3 1 ) . m-itr-? £^-ifWtK 
uTlI^LTm-^r-^*E1tt4 (S3 2) . «^ 

-f^vyzmkLxmmmmtm*). z.<nm 

HfFtgiftfc LT^IE€^g|52 0$:^ffit«lSEfi^ 
^raSr^frS-tS (S33. S34, 01 l#Si) . 

z<vim^T-?t mm-k. mmzm o * d«3 5 1 

ji-f (S3 5) . 

[009 9] 01 llCjjrfiSfc, Y~-9>12<nim. 
ffl4^SS2 0A*h-^yi 2<m.m&\ 936»6DWa}S 

^k§=t{ior<oj:3fc«ia* j atf. a-f. ^iEfi« 

frfc^^lEfflk LT^IEffl^^? 2 1 tEtt-f 6 ( S 4 
2. S43) . 

[0 100] 01 2t^-rj:3t, Y~9>\2<tfm. 
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mm&2 1 fcK«5*lTV*ftttfiE»frR»SW- ( S 5 

i) . zw)t>. m.m&ft®2i<7)immzfflML 

•fh ( S 5 2 ) . M*ifiLfc8iiiE<t£3l&fc LT^^S 
£S52 4 SrDf^ffi U fttfEfitC#&*Jlr*- ( S 5 3 ) . 
mm<?)®tzm%$:ttLTiiiJlt& (S54) . 

[oioi] &±xm i emmnwnmTth . 

[ 0 1 0 2 3 Srfc, 1$SFF8 - 6 2 0 7 6-5§-<Oi— flZ 

- 6 2 0 7 9W¥*Ert4T^-feXf-*- -y h 

(BEffftUMNR) fcrtHJfr&WtB 1 ?, £<077-fcX 
h fca— WWHSI: tffl^riPB, HiHW* 

[01 033 £*>J:3WIWW-*£i:T% h-?y 1 2 
rtfBfcJB*L*lt*U3«rfe<rv4ttM«»»2 lag* 

[0104] cut wvmmi <Mz*m<r>m2<7)m 

«c*fl/C. «o*»«IIKfe3iloLfctO'e**. JUT 

[0105] vh-9yi2tfimmn&iLxwK&* 

[0106] «ra**WKfcffl*rt-4**ft«o»i«M- 
[0107] 0ESt LT*Of!fflB««raLfc«&£ 

■w>WE«t>a0r«. 

[0108] WfflJBK^rtS^flWaWlI^tTtt* 

fit J: or, OJ«ftf>a«tt&!fcb» 611*4 
■TIBfcfrO* ITOMUBIBIT-OTOO (WWW) fa 
feKWcfrbt <Tfcftv\fc3(c-f4. 
[0 1 093 ®* y*HHT'SnS8Eft£«JW4 • 



[oho] ^iu-waeitweii. wra&*»fc«>atfj 

[0 1 1 1 ] 01 3fc*SetWtc*Ht* h-^y 1 2C0 
3*. El 3fc*JViTH3t=»»f4fBBr 

8. tg-^SUl 9, ®IEffi£^2 0, «tEBfiM9S2 
1. h-^>«i»^23, 1£HF*»24, mm 

S53 0, s^sai3 1. tH&a53 2, *y?~&mm 

«*»3 3. #&*fflE*3 4«sfr3rl/0*4. fcfc. & 

[01123 4MmT»iflmui»aa 1 1 toafUi 

f-^TMWWS 0 S-^l- LTfr*rfl4 «k 3 te«Jft**U ©I 

mn 3 0 iifiN8«yi2iE 1 1 *»fe«n«fe« uwwc* 

[01133 MM* 3 0J«*5rtSHCh-* 2<0» 

x. minmmrs&t&x* 

**fc**-fcv^»lfcfT3. -Sr. f*ifce-Kfc*m 
rtti^fcfcfflUBNIK* <-feJ'5'-*&ft*«IE 

1 (=fiM*L-cv)«ME«k«& LfcWE**m*?-4 t 

v^««t>Wttf»*4J:3fcl/CfcJ:v*) , 

[01143 a**- m 

itf«*iHl^ff->fc|i«Wr4ffcJ:ft. 01 3«IHR» 
3 2J4«'iM!Hfttf-afcll»*«»UtV^. WiBf. 
^WEBBbftWi&ftfeiifciaR (Witf 1 0 0E*if ) 

[01153 ffifi&i: UTlSW*^rt-**^Cli. IW» 

3 0 ftmzm%ztifzm®<M$±mi<otimizm^x 

[0 1163 oyfch-^yi2«IWW3 0«)«Sl* 
014-01 6fc«iUTMfflfi:R»*-4. =5rfcs 01 
4-01 6fcfeviT*»T*LTft4ttBB4IH»»3 0 
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[ o 1 1 7 ] m 1 4 C8V vc . ffifsaa^B i i h 
1 2(oaoffla53 ots-ts*. ^E<tai^s*fc 
£vwtmmmt<7)^-ftd)*ii { 7JiztL&. t-r. mm 

&3 0<D*:-FtfW±*:-} ; frl:ofrWmi}Ztl& (S 
61). ffjht- KTfcVii: SfciifHWf 3 20fHRffi 
C0tHRaft<VML 100£jg 
£fc*iT3a»a<ffiM<tfl* (S6 2. S63). 100 
fettiTV^rV>»frft:»4Hl6»y-FBtca*. 
«H»*ff3. 10 0ftJB£TVi*«^fcl4»6ft** 
Wtetttfrt-*. &l»ISft&2 lOfflS-S! 

*HiU *flMHW2 4KJ:9#6tt*tlUffl»4jSS 
*, gtt&i. (S64, S6 5) . *ftft# 

ltejK"*- (S66) . *UCtHR»3 2*>tf 
Wlt^UTUTffjht-KWWff* (S67. S6 
8) . 

[0 1 18] Z?v7S61£i3\vC* f&Jffll&3 0tf& 

«HtfjB*a\ «BBfBManWSBM3*i* ( S 6 
'9-. S70. S7 1 ) . ^!Wg#<0«£fc<±fff$B 
1 1 r SflfllffcfcE- KT* S j 4: H p * -y 
-tr-i^SIU »a**7-t* (S72) . g#*<&IE 
€Jfi*S^^tc«i^liHffi«^g|52 1 *)W5Eft&R* 
3X0, «?»&»24fcJ:0»Sft*«aM*4JSS 
SftBXS (S73. S74) . -TOO^ 

mmzwmnmsmi 1 (ciiL»a*iRT-tfi ( s i 

agBl l(cx5-*>El/CfflJI*»7'f4 (S7 

6) . 

[o 1 1 9] 01 s\&gefmm&mt. hi sts 

lttE»2 4tcafr»6*5]EStt*ttlE"t* (S7 

7) . #&WELW*Uf» a^iifcWMi:. EHEIIfc 
885 2 1 cofcM fctrJtKU mtfi-^th 3 *» 
£&£-fl> ( S 7 8~S 8 0 ) . -8rtfttf$fl«ipa5<0*: 

Mj yfe-^tflHBlHBai 1 lc«* ( S8 1 , 
S82) . *??7S78£glvC*&tfiEL<&Vtl 

*&«ggi lteSBLrMHt^f-ft (S83) . at 
tsiUTjaafe^-t* (S84) . 

[ 0 1 2 0 Ym 1 6ttft®ffi#BaffiM;i{f 1 0 0 £ JiE 

*aw»*a»*r o Mmatztih ( s 8 5 > . ts^g 

*«^CU*SftfcT-*fc«#ffll 9C384 (S8 

8) . 9{ia#Srffd (S89~S93) . £ 



«8IS*l* (S86) . mtm$rchhti>£Mim 1 

4«y-HCfc3i6», «?Hfflai^JPISrff d . Xf^r 
S 8 6(3feV^Tfi^lEffiai^^Tt^V^fc:{i:X7- 
i&mftSSS 1 1 (3E LT«SI$-iK7-r«» ( S 8 
7) . 

[01213 JaJbT h > 1 2 6OS0fflJgB3 0 <o*&so 

[ 0 1 2 2 3 £*>W«i, ttSSIMSIS 1 1 ff* 

fcl/0*4JWlift> (H16«)^yrS8 6*»4>Hl 
4ff)J-VC*ftft) *3 Wr<TU8fcfrV\ «i 

[01233 aphfi 9. 3.—f®mmsm 8im 

[0 124] JBffi&K*3U4Hl6Tfc^LfcJ:dfc: 
-?<0&£±j£U t*lftfIflM»ii:tr«»»3 0lC« 
[01253 MEffl^fifea52 0fiJIS£j£SS3 1 
[01263 

[&3] Hu = Has h (ud) 

[01 273 2 4 {±JfS 1 W^SfiCT fc HWc . 

•e^h-^ y«ffl<7)fif5^l£«»-rSli5?5ll«J$g|52 3 

WB3 4WWlWx. ■fey^-&IMM9«B3 3fcflM* 
* 3 Wttf S i: V ^ o ISM* ft o . 
45tt«tfflv^* - 1 *^TtgT'S) 0 . JWSK#MS?*6*> 

[01283 ^mm^mmm^m. 1 1 * 

ftHl.7fcSrt. 01 7fc*SVvCH2i:**JG-f*>B!lffc 

lconsswotofc {5(2-11 tawr**^ *mtw«> 

ffi#3S!i^ai lTlifcSl^T'h-^yfrmt-K 
#OWMfe»tKS»«ft#«lE«afi»3 6**J>5 
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[0 12 9101 8tZ#m&W£mh*>fi-<0®W. 
£S1 3<?Mm**. 01 8£fcWCI25i:tt{Stft 
WJMcttttJ&tftlftfcft*. £«Blfc«VvC. ffiftfc 

^Sfifc^ClitifflB&SSSB 1 lfc-fey*-*>#6 

®i>g=Srft. 

[0130101 9fc**Tftfif 8<i*W«)MK>ailfi 
fcijcf . ( a ) ttflNUgaigS 1 1 «>UB8&8 1 6 fc 

Bns*i*«fflwtr»*. m^co^mmmt < c > 

[01311 flKBffig&Bl l!&»fc-fey*-tC«Kfcai 
tftftRfctt, *«B*^5*l*fc:h-?:'12S» 
4^V*fctl«WiWt*3*J.* (b) . *&tt&MEtt 

i&L7tktf)-t-&a (d) . 

[01321 •fey^-iiEJS^tE^/ttolC ( d ) om 
ft. (e) Tfcft. 

[01331 ^tzpgioaa i 3<tym\,z^xwim- 

fc*ttS*i«i:*lc, *&ME»2 9fc83*ift. S£ 

1 1 *£*»&:hX Oft h-7 V 1 2 O&BM 
*«KU *<^l^£fflVvtJI^g££;ftaE-rft. 

[0134] ®m<?y%mtf%ki>&tmm8m®2 nm 

ffUitftft. JMfflttEa2 7tt45aBLfcJBW*«8 

^mmMkiM^X^^lzii. ZfdMcomWli 

ft. 

[ 0 1 3 5 1 Jra«rt*0llriBBSWiiaTa J: 3 teff* 
*ift. 

( 1 ) aLMiT*fcKBO5!IjMyT0J: Sfrttfrefcft 
fc-fft. 

(id lP hu 0 ) , ( i d 2 , hui) , ( i d 3 , h 



uj) ( i d„, hu„.|) , sign (h 

u.) 

fctfU dliflBBSffiiff. huli^JRJBd^ 

J«ftfc>to!rW>WHl, s i gn () lih-^yW 
-fy-C'fcftfc-fft. 

(2) h-^y^[lli»or*fcllK)WHl*JIWW» 
a»+*»<5>«La}L. *fl£Hu o 1 dfth. 

( 3 ) S6*iT&fclMlKBaSttaJBB ( I Dj . h 
u,) *>+a»&*MEfflhu 0 «!l9aiU «i««Huol 
dfc$Ui#>£3fr£I|ft«>ft. 

(4) 3;tHash (Id,. hu 0 ) fcKJTU «u&» 
h u ! fcfcft *>if 3 «>*fld>K>ft . 

( 5 ) LT©^)^E<ah u n & xmfrfr 

ft. 

T'$>ftfcWBrtft. 

[01361 WraOifem. JM6WIEU*i«>i:flR 

saw***)*. *tt*>ME<ih u ntfmTgzmzm 

[01371 JSUbOJ: 3 fcftJfcf ft-T ht\ ftft^T 
h-^vaMMBfcffjM-ftfcft. -^tf0ff»S^S<7)f(l 

fcty^-fc^LfcWUttf&^Srft. ^T, JK 
[0 1 381 ifc. HEV^-ffltfWKoaBEffcWEftS 

rffflgmmtriiiitMiisEmzfibtiz z. t car 
ft. 

[01391 4feaW«tWfc«^T. h-? >#i»<J 

izmimz &jj-r&£? izffifct &ztx\ msmsw 

wmsfr* o &*« i t ft . 

[oi4oi -r%bh. mnuc x dizmmztfrntm 

b-^ ^gawfc-t^js-cfliftUTv^fttjBEfita 

/s) *&T-t. ®<?)mco\zkA,w,z^x\$mtf*j 

[01413 ci<o%&wi, -by^-^aftstiftfOffi 
JBBi«ittH2 0«J:34flWte*ft. -<7)B$. M6 
*H^>TOfc J: orflHMS®MTjBK2 5 mbtlX 

[01421 *(c*Ufc J: d=M«M*«»t L*>»fc 
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x v i h: t frfrb b-rttitfjE^x-h hzt \m®.x- 

[ 0 1 4 3 ] <0fcHffi£J?At £ d 

Wi®B2 4(7)^*«g!iP^rtli:'5:l.^tT\ £9<0Jg 
BKo<,vmg@FU1gfc*i>tf>T'&i>. o^ 1 ). HE1 

*^ss i o t x-itrnzm mm nzx^x.mm 
i^h^M23txm^mmim2iz^x . 

2 5*^®K3 6^t > li¥*ft#«?liEffi3(cJ:-o-C. S 
E 3 7 A^Jge 5 7 * &Sffi4 1 J: r> X . 

i o 1 4 4 ] z<dx o izm^mmxmzmnmffi. 

*mmwzm\-th z. t x-mm^-^^^htitz^z 

x'i,m<DmmD±mttiz^xm£**iffiktzzk 

tfx-zhiotthnx-hh. 

[0145] z-tizmtf-btzMztey—ryfoUff)® 

muz}$\ ^xnmm^frt' o a^jg-rsgafcis 

ft. h-tyvnmw&^M&ztemmzmzmm 

[oi46] h-rymmttzftbKKxtft 

01 6O./-h*Ct01 40/-KC (*r-y 7*S6 
4 ) fc$HSS#4*)Ttt*< . 8SEfi£JSSrLT#&tf 
**Efi*^L*:h.*flHBEH« 1 1 taw* 3 fc 

[ o 1 4 7 ] 4* , h-? ytasitiwfifctffctf * £ b 
* k , «3* LfcfM:*- Y»Jm&*frk IX. r|jf 

iaicff±ufc*3&»4)iBiUfc«Miij t-rscikJti^rtg^ 
[oi48]$ *nsfeMT{±^a5taj^-f i. 

its BK*ffi#f*ri:fca'7V*tf>tt$;ir'7Vl»LT 

wf. mm®mi5iixs*m&x'$mLx^h*v>? 

[0149] 



a. mtzr-f&mbtKMz. T-tzmm 
ixT-f&<o'te%mmmmimMzmt& a 

WW) *Wi 4. tttEfiU»fe*ff LTtt 

«Ci*fcft40TSR*l»jtC# . T-^&IEfrBH 

T-fiizwmiiHcomzmQt&ztizx*), 
ffliix& t §ztix^z>T—?X'*>^xi>*<7)m*m 

mWSW4T-*t3tLTjE3**>B«fcf«-Ufc 
fit. BSflHSiiaWgttKojfcktfc. mat" 4«ui£8i 

#&#*ttttfi*ilWfc:Sfi*1- 4 «k 3 tcffitfr-**) 

-»wh»» ut t> < cor-fiz^xiimmiz 

WEfcfrd 4. 
[Bmatt*&R&] 

[01] iOWJBO* 1 «>SBt0l*gflc2: LTSrfr 
o>y?0T&4. 

[02] 01 <7>tt?8J!WS 1 1 OflWte*t:/n «y 

[03] 01Oh-?yi 2«>fl6at*t7'ny^H 

[04 ] H30ttEfift$tt2 1 JriiBJ-rSH-r'S. 
4. 

[05] 01<OHIJRgSl 3«Ofii^$:^-ryD-/^0 

[06] h-^yi2(cfiV^Ta-9S*i*1MB*R>fl 

[07] mmm?>mmwm-?h®x'hz>. 

[08] flJffl**^f«gOf!lfflS**«*o>tB#<7)fff# 
iaa^Sl l«)«»»14««SI*RW67D-f-ir 

[09] f!ffl«^^5WfflBBEIJR«*3W(Sr->fc«W>fl| 

««^ia i i <o$fj«P95 1 4 mmmmi y 

*-hX'b&. 

[010] Y-tvi 2<7)mui 9mmkmm 

1 l*^B|^b$ii^1ffgOffi^*SrSftIlXo^^) 

WHtUKB^i^n-f-t—hT**. 
[011] h-^yi2oa*Wi9*»4>ifVaiS*i 
I) h-^y 1 2*)&fEit±j£g|52 0«fflliBf!W-«7 

[012] 2<r)mm&*n2 2tfmm 
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12 


Y-?y 
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